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1. REAL PARTY IN INTEREST 

The invention is assigned to Intel Corporation of 2200 Mission College Boulevard, Santa 
Clara, California 95052, 

2. RELATED APPEALS AND INTERFERENCES 

To the best of Appellants' knowledge, there are no appeals or interferences related to the 
present appeal that will directly affect, be directly affected by, or have a bearing on the Board's 
decision. 

3. STATUS OF THE CLAIMS 

Claims 1-27 are now pending in the above referenced patent application. Claims 1-27 
were rejected for the third time in the Office Action mailed on August 10 3 2005 and are the 
subject of this appeal 

4. STATUS OF THE AMENDMENTS 

No amendments have been filed subject to the Final Rejection, 
A copy of all claims on appeal is attached hereto as Appendix A_ 
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5. SUMMARY OF THE CLAIMED SUBJECT MATTER 

la today's society, it is becoming more and more desirable to transmit digital information 
from one location to another in a manner that is clear and unambiguous to a legitimate receiver, 
but incomprehensible to any illegitimate recipients. Accordingly, such information is typically 
encrypted using one of two commonly used cryptographic techniques: public key cryptography 
and symmetric key cryptography. (Appellant's Specification, page 1.) 

In general, public key cryptography involves the use of a public key and a private key 
(collectively referred to as a "key pair") which are two separate, but related keys. Normally, the 
public key is publicly available and widely used for encrypting a message directed to the owner 
of the key pair. The private key is maintained in confidence and usually is used for decryption of 
incoming encrypted message. As a result, public key cryptography tends to be more secure than 
symmetric key cryptography, but it is more cumbersome and computationally intensive. The 
intense computations tend to prevent consumer electronic devices and other lower performance 
devices from using public key cryptography. (Appellant's Specification, page 2.) 

With respect to cryptography related terminology, the term "secure" indicates a state 
where it is not reasonably feasible for an unauthorized individual to access information in an 
non-encrypted format A "key" is generally defined as an encoding and/or decoding parameter 
usually structured as a sequence of binary data. A "digital signature" includes digital 
information signed with a private key of its signatory to ensure that the digital information has 
not been illicitly modified after being digitally signed. This digital infonnation may be provided 
in its entirety or as a digest produced by a one-way hash function. The "one-way hash function" 
includes a function, mathematical or otherwise, that converts infonnation from a variable-length 
to a fixed-tength (referred to as a ^digest"). The term "one-way" indicates that there does not 
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readily exist an inverse function to recover any discernible portion of the original information 
from the fixed-length digest Examples of a hash function include MD2 or MD5 provided by 
RSA Data Security of Redwood City, California, or Secure Hash Algorithm (SHA-1) as 
specified by the National Institute of Standards and Technology located in Washington, D.C. 

In addition, a "digital certificate" includes digital information used to authenticate a 
sender of information. For example, a digital certificate may include information concerning a 
person, entity or device being certified that is encrypted with the private key of a certification 
authority. Examples of a "certification authority 77 include an original equipment manufacturer 
(OEM), a software vendor, a trade association, a governmental entity, a bank or any other trusted 
business or person. 

Referring now to Figure 1, an illustrative block diagram of an embodiment of a network 
100 employing at least two digital platforms is shown. Network 100 includes a first digital 
platform 120 and a second digital platform 130 capable of establishing communications with 
certification authority 110 via channels 140 and 150, respectively. Platforms 120 and 130 can 
register with certification authority 110 in order to receive secret device keys therefrom. Each 
platform 120 or 130 can be classified as either (i) an information provider, or (ii) an information 
receiver, or (iii) a transceiver capable of operating as either an information provider or an 
information receiver. Of course, other classification schemes may be utilized so long as 
communicative platforms have compatible classifications. Also, first and second digital 
platforms 120 and 130 communicate with each other via channel 160. 

As shown in Figure 2, an embodiment of certification authority 110 is shown. 
Certification authority 1 10 comprises a digital platform that includes a processing unit 200 and 
memory 210. In particular, processing unit 200 is any hardware having code processing 
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capabilities such as, for example, a central processing unit, a microcontroller, a coprocessor, a 
state machine and the like. Processing unit 200 accesses information fix>m memory 210. In one 
embodiment, memory 210 is volatile memory with data backed-up in non-volatile storage. Of 
course, it is contemplated that memory 210 may be implemented to operate as non-volatile 
memory to ensure that its contents are retained during a power-down condition. Thus, memory 
210 may include, for example, (i) read only memory (ROM), (ii) any type of programmable read 
only memory (PROM) such as erasable PROM (EPROM) or electrically erasable PROM 
(EEPROM), (iii) flash memory, or even (iv) battery-backed volatile memory. 

Memory 210 retains the certification authority's public key (PUKCA) 220, its private key 
(PRKCA) 230, and a multi-dimensional matrix 240 of matrix keys (K) arranged in grids (e.g., 
rows, columns, along z-axis, etc.) held in secret to be known only by certification authority 110 
of Figure 1. PUKCA 220 and PRKCA 230 are provided to support matrix key authentication 
schemes, not the formation of shared secret key "SECKEY". Currently, each key is 64-bits, 
although any bit size may be used (e.g., 32, 128, 160, 256, 512, 1024...). For increased 
protection, PRKCA 230 and key matrix 240 may be obfuscated by tamper-resistant software. 
The dimensions of key matrix 240 and length of the matrix keys correspond to the desired 
Strength of security for network 100 of Figure 1. 

In the event that key matrix 240 is a two-dimensional nxm matrix, for example, one 
matrix dimension (e.g., "n 77 rows) may be assigned to a first platform classification while the 
other matrix dimension (e.g„ "m" columns) is assigned to a second platform classification. The 
"platform classifications 77 need only be something that can differentiate participants of the 
authentication. Thus, the classification may be (1) information provider/information receiver; 
(2) multiple types of information providers; and (3) multiple types of information receivers and 
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the like. Thus, if the first platfoim classification is an information provider, it would receive "m" 
secret device key sets created by performing arithmetic operations on the matrix keys situated in 
selected "p" rows (p<n) for each column. For this embodiment, the arithmetic operation 
involves modular addition, although exclusive-or (XOR) operations, non-modular addition or 
other operations may be used. Information receivers (second class), however, would receive "n" 
secret device key sets created by performing arithmetic operations on the matrix keys situated in 

selected "q" columns (q<m) for each row. For maximum security, iL p" is equal to and "q" is 

equal to y • however, p or q may be any selected number of rows or columns less than norm, 

respectively (see Figure 6). 

Referring now to Figure 3, an illustrative block diagram of a first embodiment of key 
matrix 240 is shown. Key matrix 240 is a two-dimensional, nxm matrix with a first dimension 
(e.g., rows) 300 dedicated to a first platform classification (e.g., an "information provider" class) 
and a second dimension (e.g., columns) 310 dedicated to a second platform classification (e.g., 
an "information receiver" class). For clarity sake, key matrix 240 is represented as a 6x$ matrix; 
however, key matrix 240 normally comprises a larger-sized matrix, even a 40x40 matrix or 
larger. It is contemplated that the dedication of matrix dimensions for each class could be 
different. For example, columns and rows could be dedicated to the "information provider" and 
'^information receiver" classes, respectively. 

For each digital platform, the certification authority generates a combination of tows or 
columns associated with key matrix 240. Preferably, the combination is unique, but uniqueness 
is not required. For example, in this embodiment, if the first digital platform is classified as an 
information provider, the certification authority generates a combination of rows, which is 
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represented as a first key selection vector (KSVI) 320 for the first digital platform. Herein, 
KSV1 320 is equal to <2, 3, 5>> Based on KSVI 320, the certification authority generates a set 
of secret device keys (l_SDKEYl - 1_SDKEY6) 330-335 and provides both KSVI 320 and the 
first set of secret device keys 330-335 to the first digital platform. As shown in Figure 4, secret 
device keys 330-335 are generated through modular addition (e.g., modulo 2**) of matrix keys in 
the selected rows of key matrix 240 for each column. 

Referring back to Figure 3, if the second digital platform is classified as an information 
receiver, the certification authority generates a combination of columns associated with key 
matrix 240, which is represented as a second key selection vector (KSV2) 340. Herein, KSV2 
340 is equal to <1, 3, 4>. Based on KSV2 340, certification authority generates a set of secret 
device keys (2_SDKEY1 - 2_SDKEY6) 350-355 and provides both KSV2 340 and the set of 
secret device keys 350-355 to the second digital platform. As shown in Figure 5, for each row, 
the second set of secret device keys 350-355 are produced through modular addition of the 
matrix keys of key matrix 240 pertaining to those columns selected by KSV2 340. 

To secure channel 160 of Figure 1, the first and second digital platforms exchange KSVI 
320 and KSV2 340. Hence, based on KSV2 340, the first digital platform creates a shared secret 
key (SECKEY) equivalent to the modular addition of l^SDKEYl, 1_SDKEY3 and 1_SDKEY4. 
Concurrently, based on KSVI 320, the second digital platform also produces SECKEY through 
modular addition of 2_SDKEY2, 2_SDKEY3 and 2_SDKEY5. As shown in equation (1), 
SECKEY is determined to be the following; 

(1) SECKEY (at DPI) = (K21+K31+K51>f<K23+K33+K53)+ (K24+K34+K54) 

= (K2l+K23+K24)+(K31+K33-fK34)+(K51+K53+K54) 
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Referring now to Figure 6, an illustrative block diagram of a second embodiment of key 
matrix 240 is shown. Key matrix 240 is a two-dimensional, nxm matrix with a first dimension 
(e.g., rows) 400 dedicated to the "information provider" class and a second dimension (e.g., 
columns) 410 dedicated to the "information receiver" class.- For clarity sake, key matrix 240 is 
represented as a rectangular (4x5) matrix in lieu of a square (6x6) matrix as shown in Figure 3. 
(Appellant's Specification, pages 7-12.) 

Referring now to Figure 9, an illustrative block diagram of a third embodiment of key 
matrix 240 is shown. Key matrix 240 is a two-dimensional, nxm matrix with a first dimension 
(e,g., rows) 500 dedicated to the ''information provider" class and a second dimension (e.g., 
columns) 510 dedicated to the "information receiver" class. For clarity sake, key matrix 240 is 
symmetric and represented as a 4x4 matrix. (Appellant's Specification, page 13.) 
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6. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

The above referenced patent application has been reviewed in light of the Office Action, 
dated August 10, 2005, in which: 

• claims 1-18 are rejected under 35 U.S.C. § 101 as having no utility; 

• claim 19 is objected to because of a lack of antecedent basis; 

• claims 1, 3-11, and 13-27 are rejected under 35 U.S.C § 102(e) on Lotspiech et al 
(hereinafter 'Lotspiech;' U.S. Patent No. 6,118,873); 

• and claims 2 and 12 are rejected under 35 U.S.C. § 103(a) as being unpatentable over 
Lotspiech h\ combination with Luther (U.S. Patent No- 5,533,127). 
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7. ARGUMENT 
7.L Claim Objections 

7.1.1- Claim 19 

The PTO has objected to claim 19 because 'there appears to be no antecedent basis for 
the limitation 'machine readable medium"'. This objection is respectfully traversed. 
M.P.EJP. § 2173.05(e) addresses a lack of antecedent basis. 

2173.05(e) Lack of Antecedent Basis 

A claim ia indefinite when it contains words or phrases whose meaning is unclear. The lack of 
clarity could arise where a claim refers to "said lever 11 or "the lever, 11 where the claim contains no 
earlier recitation or limitation of a lever and where it would be unclear as to what dement the 
limitation was making reference. Similarly, if two different levers are recited earlier in the claim, 
the recitation of "said lever" in the same or subsequent claim would be unclear where it is 
uncertain which of the two levers was intended. A claim which refers to "said aluminum lever," 
but recites only "a lever" earlier in the claim, is indefinite because it is uncertain as to the lever to 
which reference is made. Obviously, however, the failure to provide explicit antecedent basis for 
terms does not always render a claim indefinite. Lf the scope of a claim would be reasonably 
ascertainable by those skilled in the art, then the claim is not mdefraite. Ex parte Porter, 25 
USPQ2d 1144, 1145 (Ed. Pat. App. & Inter. 1992) ("controlled stream of fluid" provided 
reasonable antecedent basis for "the controlled fluid 11 ). Inherent components of elements recited 
have antecedent basis in the recitation of the components themselves. For example, the limitation 
"the outer surface of said sphere" would not require an antecedent recitation that the sphere has an 
outer surface. 

A CLAIM TERM WHICH HAS NO ANTECEDENT BASIS IN THE DISCLOSURE IS 
NOT NECESSARILY INDEFINITE 

The mere fact that a term or phrase used in the claim has no antecedent basis in the 
specification disclosure does not mean, necessarily, that the term or phrase is indefinite. There is 
no requirement that the words in the claim must match those used in the specification disclosure. 
Applicants are given a great deal of latitude in how Ihcy choose to define their invention so Jong as 
the terms and phrases used define the invention with a reasonable degree of clarity and precision- 



Appellant begins with claim 19, Claim 19 recites; 

1 1 9. A machine readable medium having embodied thereon a computer program for processing by 

2 a first digital platform including memory containing the computer program comprising: 

3 an authentication function to recover an incoming key selection vector and to compute a 

4 shared secret key based on a set of secret device keys stored in the first digital platform and the 

5 contents of the mcoming key selection vector; 

6 a transfer function to output at least a key selection vector assigned to the first digital 

7 platform; 

8 a hash function to perform a hash operation on at least the shared secret key to produce a 

9 resulLant hash vahie; and 
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10 
11 



a comparison function to compare the resultant hash value with an incoming check hash 
value received subsequent to the transmission of the key selection vector. 



Appellant respectfully asserts that antecedent basis for "machine readable medium" may 
be found in the first 3 words of line 1, "A machine readable medium". 

Furthermore, Appellant asserts that the plain, dictionary meaning of the phrase renders 
the phrase sufficiently clear to overcome this objection. See M.P.E.P. § 211 1, It is respectfully 
asserted the phrase obviously means "a medium which is able to be read by a machine". The 
American Heritage Dictionary of the English Language, 3 rd ed., 1996 by Houghton Mifflin 
Company defines a "medium" as "an intervening substance through which something else is 
transmitted or carried on." 

Appellant respectfully asserts that, when given the broadest reasonable interpretation and 
plain dictionary meaning, the objected phrase does not lack antecedent basis. It is, therefore, 
respectfully requested that the objection of this claim be withdrawn. 
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7.2. 35U.S.C.§101 



7.2.1. Claims 1-18 

j 

The PTO has rejected claims 1-18 under 35 jLf.S.C. § lOh This rejection by the PTO of 
these cl aims is respectful ty traversed. j 



As a procedural matter and to aid clarification, it is also respectfully noted that this 

rejection was raised and successfully overcome in the May 27, 2003 Office Action and 

I 

subsequent Reply. Over two years later this rejection reappeared in the August 10, 2005 Office 

i 

Action. ; 

i 
i 

35 U.S.C. § 101 reads as follows: j 

i 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition 
of matter, or any new and useful improvement thereof j may obtain a patent therefore, subject to 
the conditions and requirements of mis title. 

I 

MJ\E.P. § 2107.02 sets forth the standard for a § 101 rejection based upon utility: 

2107.02 Procedural Considerations Related to Refections for Lack of Utility 
An Asserted Utility Creates a Presumption of Utility 

In most cases, an applicant's assertion of utility creates! a presumption of utility that will be 
sufficient to satisfy the utility requirement of 35 U.S.Cl 101. See, e.g., In re Jolles, 628 F.2d 1322, 
206 USPQ 885 (CCPA 19S0); Tn re Irons, 340 F.2d 974, 144 USPQ 351 (CCPA 1965); In re 
Langer, 503 F.2d 1380, 183 USPQ 2$S (CCPA 1974); jln re Sichert, 566F.2d 1154, 1 159, 196 
USPQ 209, 212-13 (CCPA 1 977). As the Court of Customs and Patent Appeals stated in In re 
Langer: | 

As a matter of Patent Office practice, a specification which contains a disclosure of utiliry which 
corresponds in scope to me subject matter sought to bej patented must be taken as sufficient to 
satisfy the utility requirement of § 101 for the entire claimed subject matter unless there is a reason 
for one skilled in the art to question the objective truth of the statement of utility or its scope. 
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! 

i 

Appellant respectfully asserts that the claims 1 & 1 1 result in a "shared secret key." One 

! 

of the uses of the claimed invention is explicitly recited in the specification on page 3, lines 1-5. 

"[I]t would be desirable to develop a cryptographic technique that provides the security 

1 

advantages of public key cryptography without the disadvantages of being cumbersome and 
computationally intensive." It is noted that the stated use is merely one of the possible uses for 
the "shared secret key," and the invention is not limited to the cited use_ Appellant respectfully 
reiterates the directive of M.P.E.P. § 2107.02 "As a matter of Patent Office practice, a 
specification which contains a disclosure of utility: which corresponds in scope to the subject 
matter sought to be patented must be taken as sufficient to satisfy the utility requirement of § 
101 for the entire claimed subject matter." (emphasis added) 

It is respectfully asserted that the PTO has failed to support a proper § 101 rejection for a 
variety of reasons. Likewise, claims 2-10 and 12-18 are patentable for similar reasons. It is, 
therefore, respectfully requested that the rejection of these claims also be withdrawn. 
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7.3. 35 U.S.C. § 102(b) 

7.3.1. Lotspiech: Claims 1, 3-11, and 13-27 

The FTO has rejected claims 1, 3-11, and 13-27 under 35 U.S.C. § 102(b) as being . 

anticipated by Lotspiech. This rejection by the PTO of these claims is respectfully traversed. 

It is well-established that in order to establish a prima facie case of anticipation under § 
102 of the patent statute, the PTO must provide a single prior art document that alone has every 
element and every limitation of the claim being rejected. Therefore, if even a single element or 
limitation is not met by the asserted document, then the PTO has not succeeded in establishing a 
prima facie case. 

A claim is anticipated only if each and every element as set forth in the claim is found, 
either expressly or inherently described, in a single prior art reference. Verdegaal Brothers v. 
Union Oil Co. of California, 2 USPQ2d 1051, 1053 (Fed. Cir. 1987). The identical invention 
must be shown in as complete detail as is contained in the claim. Richardson v. Suzuki Motor 
Co., 9USPQ2d 1913, 1920 (Fed. Cir. 1989). 

Appellant begins with claim 1. Claim 1 recites: 

1 LA method comprising; 

2 providing a key matrix having N rows and M columns of matrix keys, where N£2 and 

3 M>2; 

4 dedicating the rows of the key matrix to a first classification; 

5 for each column of the key matrix, performing arithmetic operations utilizing matrix keys 

6 of at least two selected rows of the key matrix to produce a secret device key which is part of a 

7 first set of secret device keys; 

8 producing a shared secret key based on arithmetic operations on selected secret device 

9 keys of the first set of secret device keys. 

It is respectfully asserted that, as just one example of how the text cited by the PTO fails 
to meet the language of the rejected claims, Lotspiech does not show, teach, use, or describe 
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utilizing matrix keys of at least two selected rows of the key matrix to produce a secret device 
ke£ The PTO states that Lotspiech shows this feature on Column 5, Hues 55-68, but Appellant 
respectfully asserts that Lotspiech docs not show this. 

Lotspiech,. in Column 5, lines 55-68, describes the creation of the matrix illustrated by 
Lotspiech Fig, 5. An important thing to notice from Fig. 5 is that the elements (e.g. E(xi, s^)) 
consist of results derived not from at least two rows of what the PTO contends is Lotspiech's 
key matrix (Fig. 3), but one elemen t of the key matrix. Si,i, and a session number, xi. See, Col. 
5, line 60. It is respectfully asserted that if at least two rows were used the elements of Fig, 5 
would consist of results derived from functions that require multiple key matrix elements as 
inputs, such as, for example, E(xi, st.u Si^). In contrast, Appellant's Fig. 5 illustrates taking 
multiple rows (three in the case of Fig 5) from the key matrix and using them to produce a secret 
device key, such as, for example, 2_SDKEY1 = Kn + Ki 3 + Kw, which is part of a fist set of 
secret device keys. Therefore, it is respectfully asserted that Lotspiech fails to satisfy a prima 
facie case of anticipation as directed by 35 U-S-C, § 102. 

Claims 3-1 1 and 13-27 either depend from claim 1, or include a substantially similar and 
patentably distinct limitation as claim 1. It is, therefore, respectfully requested that the rejection 
of these claims also be withdrawn. 



Page 16 of 28 



PAGE 20/32 * RCVD AT 12/28/2005 9:05:42 AM [Eastern Standard Time] ■ SVR:USPTO-EFXRF-6/25 * DN1S:2738300 ■ CSID: 1 DURATION (mm-$s):06-30 



12/28/05 06:14 FAX 



(21021 



Appl. No. 09/275,722 Attorney Docket: 042390.P6526 

7.4. 35 U.S.CL § 103(a) 

7.4.1. Lotspiech and Luther: Claims 2 and 12 

The PTO has also rejected claims 2 and 12 under 35 US.C. § 103(a) based upon 

Lotspiech in combination with Luther. The rejection of these claims is respectfully traversed. 
M.P.E.P, § 706.020) sets forth the standard for a § 103(a) rejection: 



To establish a prima facie case of obviousness, three basic criteria mast be met 

First, there must be some suggestion or motivation, either in the references themselves or in the 
knowledge generally available to one of ordinary skill in the art, to modify the reference 
or combine reference teachings. 

Second* there must be a reasonable expectation of success. 

Finally, the prior art reference (or references when combined) must teach or suggest all die claim 
limitations . 

The teaching or suggestion to make the claimed combination and the reasonable expectation of 

success must both be found in the prior art, and not based on applicant's disclosure. In re 
Vaeck, 947 F-2d 488, 20 USPQ2d 1438 (Fed. Cir. 1991) (whitespace added). 



Appellant begins with claim 2. Claim 2 recites: 



1 (Original) 2. The method of claim 1 , wherein the arithmetic operations include modular 

2 addition. 



Claim 2 ultimately depends upon claim 1 . Claim 1 recites: 

1 I . A method comprising: 

2 providing a key matrix having N rows and M columns of matrix keys, where N£2 and 

3 M£2; 

4 dedicating the rows of the key matrix to a first classification; 

5 for each column of the key matrix, performing arithmetic operations utilizing matrix keys 

6 of at least two selected rows of the key matrix to produce a secret device key which is part of a 

7 first set of secrei device keys; 

8 producing a shared secret key based on arithmetic operations on selected secret device 

9 keys of the first set of secret device keys. 
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Appellant respectfully asserts that the combination set forth by the PTO fails to meet the 
requirement for a prima facie case for a § 103(a) rejection for at least the following reasons. 

It is respectfully asserted that neither Lotspiech nor Luther, either alone or in 
combination, suggests or describes.utilizing matrix keys of at least two selected rows of the key 
matrix to produc e a secret device key . See discussion above. It is, therefore, respectfully 
requested that the rejection of this claim be withdrawn. 

Claims 12 either depends from and include the limitations of claim 2, or includes a 
substantially similar and patentably distinct limitation as claim 2. Therefore, these claims 
patentably distinguish from the cited patents on the same basis as claim 2. It is, therefore, 
respectfully requested that the PTO withdraw the rejections of these claims. 
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8. CONCLUSION 

In view of the foregoing, it is respectfully asserted that all claims pending in this 
application, as amended, are in condition for allowance. If the Examiner has any questions, they 
are invited to contact the undersigned at 503-264-7002. Reconsideration of this patent 
application and early allowance of all claims is respectfully requested. 



Respectfully submitted, 



Dated: &ej »j 20Cr 



c/o Blakely, Sokoloff, Taylor & Zafman, LLP 
12400 Wilshire Blvd., Seventh Floor 
Los Angeles, CA 90025-1026 
(503) 264-0967 




Page 19 of 28 

PAGE 23/32 * RCVD AT 12/28/2005 9:05:42 AM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/25 ' DNIS:2738300 * CSID: ' DURATION (mn>ss):06-30 



12/28/05 06:14 FA! 

AppL No. 09/275,722 

APPENDIX A: CLAIMS APPENDIX 



Attorney Docket: 042390.P6526 



1 (Previously Presented) 1 . A method comprising: 

2 providing a key matrix having N rows and M columns of matrix keys, where N>2 and 

3 M>2; 

4 for each column of the key matrix, performing arithmetic operations utilizing matrix keys 

5 of at least two selected rows of the key matrix to produce a secret device key which is part of a 

6 first set of secret device keys; 

7 producing a shared secret key based on arithmetic operations on selected secret device 

8 keys of the first set of secret device keys. 

1 (Original) 2. The method of claim 1, wherein the arithmetic operations include modular 

2 addition. 

1 (Original) 3- The method of claim 1, wherein prior to performing the arithmetic operations, the 

2 method comprises: 

3 generating a key selection vector identifying the at least two selected rows of the key 

4 matrix from which to produce the first set of secret device keys. 

1 (Original) 4, The method of claim 3, wherein the key selection vector is uniquely assigned to a 

2 first digital platform. 
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i 

1 (Original) 5. The method of claim 4, wherein prior to producing the shared secret key, the 

2 method comprises: 

3 receiving a key selection vector from a second digital platform in communication with 

4 the first digital platform; and 

5 analyzing contents of the key selection vector from the second digital platform to 

6 determine the selected secret device keys of the first set of secret device keys. 

1 (Original) 6. The method of claim 1 , wherein prior to performing arithmetic operations on keys 

2 of at least two selected rows, the method further comprises: 

3 dedicating the rows of the key matrix to a first classification; and 

4 dedicating the columns of the key matrix to a second classification. 



1 (Original) 7. The method of claim 6, wherein the first classification includes digital platforms 

2 designed to provide information to other digital platforms, 

1 (Original) 8. The method of claim 7, wherein the second classification includes digital 

2 platforms designed to receive information from other digital platforms. 

1 (Original) 9. The method of claim 1, wherein the producing of the shared secret key comprises: 

2 analyzing contents of an incoming key selection vector; and 

3 performing arithmetic operations of the selected secret device keys located in columns of 

4 the key matrix identified by the contents of the incoming key selection vector. 
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1 (Original) 1 0. The method of claim 9, wherein the producing of the shared secret key further 

2 comprises: 

3 performing a hash operation on results of the arithmetic operations of die selected secret 

4 device keys located in the column of the key matrix identified by the contents of the 

5 incoming key selection vector. 

1 (Previously Presented) 1 L A method comprising: 

2 providing a key matrix having N rows and M columns of matrix keys, where N>2 and 

3 M£2; 

4 for each row of the key matrix, performing arithmetic operations utilizing matrix keys of 

5 at least two selected columns of the key matrix to produce a secret device key which is part of a 

6 first set of secret device keys; 

7 producing a shared secret key based on arithmetic operations on selected secret device 

8 keys of the first set of secret device keys. 

1 (Original) 12. The method of claim 1 1, wherein the arithmetic operations include modular 

2 addition. 

1 (Previously Presented) 1 3 . The method of claim 1 1 , wherein prior to performing the 

2 arithmetic operations, the method comprises; 

3 generating a key selection vector identifying the at least two selected columns of the key 

4 matrix from which to produce the first set of secret device keys. 
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1 (Original) 14. The method of claim 13, wherein the key selection vector is uniquely assigned to 

2 a first digital platform. 



1 (Original) 1 5. The method of claim 14, wherein prior to producing the shared secret key, the 

2 method comprises: 

3 receiving a key selection vector from a second digital platform in communication with 

4 the first digital platform; and 

5 analyzing contents of the key selection vector from the second digital platform to 

6 determine the selected secret device keys of the first set of secret device keys. 



1 (Previously Presented) 16. The method of claim 11, wherein prior to performing arithmetic 

2 operations on keys of at least two selected columns, the method further comprises: 

3 dedicating the rows of the key matrix to a first classification; and 

4 dedicating the columns of the key matrix to a second classification. 

1 (Original) 17. The method of claim 1 1 , wherein the producing of the shared secret key 

2 comprises: 

3 analyzing contents of an incoming key selection vector; and 

4 performing arithmetic operations of the selected secret device keys located in rows of the 

5 key matrix identified by the contents of "the incoming key selection vector. 



1 (Original) 1 8. The method of claim 17, wherein the producing of the shared secret key further 

2 comprises: 
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3 performing a hash operation on results of the arithmetic operations of the selected secret 

4 device keys located in the rows of the key matrix identified by the contents of the incoming key 

5 selection vector. 

1 (Original) 1 9. A machine readable medium having embodied thereon a computer program for 

2 processing by a first digital platform including memory containing the computer program 

3 comprising: 

4 an authentication function to recover an incoming key selection vector and to compute a 

5 shared secret key based on a set of secret device keys stored in the first digital platform and the 

6 contents of the incoming key selection vector; 

7 a transfer function to output at least a key selection vector assigned to the first digital 

8 platform; 

9 a hash function to perform a hash operation on at least the shared secret key to produce a 

1 0 resultant hash value; and 

11 a comparison function to compare the resultant hash value with an incoming check hash 

1 2 value received subsequent to the transmission of the key selection vector. 

1 (Original) 20. A network comprising: 

2 a first digital platform; and 

3 a certification authority in communication with the first digital platform, the certification 

4 authority having access to a key matrix featuring matrix keys arranged in accordance with at 

5 least a first dimension and a second dimension, generating a first key selection vector and 

6 providing a first set of secret device keys produced from selected matrix keys of the key matrix. 
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1 (Original) 21 . The network of claim 20 further comprising: 

2 a second digital platform in communication with the certification authority and the first digital 

3 . platform, the second digital platform being uniquely assigned a second key selection vector 

4 indicating at least two grids of the key matrix and a second set of secret device keys produced 

5 from matrix keys situated in at least two grids of the key matrix. 

1 (Original) 22. The network of claim 2 1 , wherein the first and second digital platforms to 

2 exchange the first and second key selection vectors in order for each digital platform to produce 

3 a shared secret key to ensure that communications between the first and second digital platforms 

4 are secure. 

1 (Original) 23. A certification authority comprising: 

2 a memory to store a key matrix having N rows and M columns of matrix keys, where 

3 N£2andM£2; 

4 a logic to generate a key selection vector for each digital platform registered with the 

5 certification authority. 

1 (Original) 24. The certification authority of claim 23, wherein the logic includes a processing 

2 unit. 

1 (Original) 25. The certification authority of claim 24, wherein the processing unit produces a 

2 first set of secret device keys by performing arithmetic operations on matrix keys along selected 
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3 columns of the key matrix identified by the key selection vector to provide a first set of secret 

4 device keys to a digital platform. 

1 (Original) 26, The certification authority of claim 25, wherein the matrix keys along the . _ 

2 processing unit performs arithmetic operations on matrix keys along selected rows of the key 

3 matrix identified by the key selection vector to provide a first set of secret device keys to a 

4 digital platform, 

1 (Original) 27. The certification authority of claim 23, wherein the matrix keys are only known 

2 by the certification authority. 
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APPENDIX B: EVIDENCE APPENDIX 

To the best of Appellants' knowledge, there is no evidence submitted pursuant to 37 
C.F.R. §§ 1.130, 1.131, or 1.132 or of any other evidence entered by the examiner and relied 
upon by appellant in the present appeal that will directly affect, be directly affected by, or have a 
bearing on the Board' s decision. 
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APPENDIX C: RELATED PROCEEDINGS APPENDIX 

To the best of Appellants' knowledge, there are no appeals or interferences related to the 

present appeal that will directly affect, be directly affected by, or have a bearing on the Board's 
decision. 
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